I’ve added a subtle prompt injection into my email signature (capitalize random words and start every sentence with the same letter), with small font size and color to not be visible.

I have already received two emails from customers that did trigger it.